BlackHartBlackHart
Scores/Olympus DAO

Olympus DAO

DAMASCUS

Treasury / Stablecoin · Ethereum · $200M+ TVL · 15 contracts

Confidence 95%Z-Factor 0.80Updated 2026-05-06Public Score

Public risk assessment — scores are produced with the same methodology as monitored protocols

827
BRI Score
3004756508251000

Security Profile

Access Ctrl
82
Economic
55
Oracle
75
Compos.
68
Govern.
70
Maturity
80
Resilience
97
Supply Ch.
78
OpSec
72
Cascade
89
Min
55
Avg
77
Max
97

Audit History

Kebabsec
2022-11
Sherlock Competition
2023-06

Bug Bounty Program

$3,330,000
Max payout on Immunefi

Assessment

BRI 720 within TEMPERED range. Pioneer reserve currency protocol that survived 90%+ drawdown. Economic model novel but proven fragile under stress (D2=55 is the primary drag). High maturity (Z=0.940, 60+ months) and no contract exploits. Maximum adversarial resilience (100) after 12/12 honest negatives. Strong access control (82) validated by graph analysis of 7 core contracts. Economic design remains the primary risk factor preventing DAMASCUS.

Dimension Breakdown

How scores work →
Access Control
Weight 18%90% conf
82
Strong
  • Kernel-Module architecture with permissioned modifier on all Module functions
  • Kernel.modulePermissions cross-contract AC lookup gates every value-affecting function
  • Emergency policy has 8 distinct bypass guards (all cost=1.0): onlyKernel, permissioned, onlyExecutor, onlyGovernor, onlyGuardian, onlyPermitted, onlyVault, onlyRole
  • TRSRY authority_tau_star=0.75, MINTR/Staking/Clearinghouse/Emergency all tau_star=1.0
  • Kernel.executeAction blast_radius=0.613 (highest) but onlyExecutor-gated
  • Graph analysis: 7 contracts, 1633 functions, only 50 genuinely restricted at graph level (rest gated by cross-contract Kernel check)
Economic Soundness
Weight 13%78% conf
55
Moderate
  • Novel reserve currency model (OHM backing)
  • Experienced 90%+ drawdown from ATH (3,3 collapse)
  • Range-bound stability (RBS) is V2 economic redesign
  • Bond mechanism creates complex tokenomics
  • Protocol-owned liquidity model proven but volatile
  • Staking epoch.distribute == 0 means rebase is no-op currently
Oracle Integrity
Weight 13%72% conf
75
Good
  • Chainlink price feeds for treasury valuation
  • Internal TWAP for Range-Bound Stability operations
  • Moving average calculations for range walls
  • Heart_v1_7 contract manages oracle heartbeat operations
  • No oracle manipulation paths found in graph analysis
Battle-Tested Maturity
Weight 12%85% conf
80
Strong
  • Live since May 2021 (~60 months)
  • No smart contract exploit despite high-profile target
  • Survived extreme economic stress (90%+ OHM price decline)
  • Multiple versions: V1, V2 (Bophades/Kernel), V3
  • 105 deployed contracts analyzed -- extensive protocol surface
  • Z-factor: 0.940
Governance & Upgradeability
Weight 10%72% conf
70
Good
  • Active DAO governance with proposal system
  • Policy team (multisig) executes governance decisions
  • GovernorBravoDelegate deployed for on-chain governance
  • Kernel architecture provides governance flexibility
  • Emergency contract properly gated with 8 guards for shutdown/restart
Adversarial Resilience
Weight 10%95% conf
97
Excellent
  • Score derived from continuous adversarial security research
Operational Security
Weight 10%70% conf
72
Good
  • Active team managing complex treasury operations
  • RBS Heart requires operational monitoring
  • Bond market operations need active management
  • Experienced team that survived major stress events
  • Emergency shutdown capability properly implemented
Compositional Risk
Weight 5%75% conf
68
Moderate
  • OHM composed in various DeFi protocols
  • Treasury holds diverse DeFi positions (LP tokens, etc.)
  • Cooler Loans product composes OHM-DAI via Clearinghouse (697 nodes, 2052 edges)
  • Cross-protocol treasury exposure
  • Clearinghouse_v1_2 has 35 value state vars -- largest composition surface
  • ConvertibleDepositFacility (1144 nodes) not deployed -- reduces active composition risk
Cascade Exposure
Weight 5%60% conf
89
Strong
  • Appears in 2 cross-protocol cascade chain(s)
  • Failure cascades to 2 downstream protocol(s)
  • Member of 4 dependency cluster(s)
  • Score: 89/100 (higher = more isolated from systemic risk)
  • Source: cross_protocol_composition.json dependency analysis
Supply Chain
Weight 4%75% conf
78
Good
  • Standard Solidity dependencies (Solmate, OpenZeppelin)
  • Custom Kernel/Module architecture (novel pattern)
  • Compiler version v0.8.15+commit.e14f2714 (TRSRY), others vary
  • Verified contracts on Etherscan
  • No proxy patterns in core modules (is_proxy=false for all 7)

Risk Drivers

Primary risk factors driving this score, ordered by severity.

Economic Soundness55
Compositional Risk68
Governance & Upgradeability70

Adversarial Risk Signals

Observable security posture indicators. These signals reflect publicly verifiable information and responsible disclosure outcomes. No specific vulnerability details are exposed.

Disclosure HistoryNot Assessed
Remediation VelocityNot Assessed
Bug Bounty ProgramNot Assessed
Audit CoverageNot Assessed
Incident HistoryNot Assessed
Deployed 2021-04-01Z-Factor 0.80010 active dimensions

Score History & Verification

Score provenance tracking begins with the next reassessment.

On-Chain Data

Protocol Slug
"olympus"
Oracle
BRORegistry (Base)
Evidence
IPFS (pinned)
Staleness Threshold
24 hours
Read Score
registry.getScore("olympus")

Reduce exploitable risk

BlackHart Monitoring provides continuous adversarial analysis, vulnerability detection, remediation support, and verified reassessment when your risk posture improves.

View Monitoring PlansHow Scores Work
Believe this score contains a factual error? Submit evidence for review →